Privacy

What I store

If you subscribe, I store your email address, where you signed up from (the site footer or inline in the essay), and three timestamps: when you submitted the form, when you confirmed, and if applicable, when you unsubscribed.

That is the complete list. There is no profile, no preferences table, no session data attached to your email.

What I never store

I do not store raw IP addresses. The subscribe endpoint computes a one-way hash used only for rate-limiting and discarded after the request completes. I do not set cookies for tracking, analytics, or any other purpose. I do not use Google Analytics, Mixpanel, or similar tools.

Analytics

This site uses Vercel Web Analytics. It counts page views without cookies and without cross-site tracking. Vercel derives aggregate stats from request headers — nothing is stored on your device.

Who processes your data

Three services touch subscriber data:

• Resend — handles email delivery. Your address is transmitted to Resend when you confirm or when I send a broadcast.
• Neon — Postgres database hosted on AWS. Subscriber rows live here.
• Vercel — hosts the site and runs the subscribe endpoint.

No other service receives your email address.

Retention

Unconfirmed signups are deleted after 7 days. If you never clicked the confirmation link, your record is gone within a week of submission.

Confirmed subscribers stay in the database until you unsubscribe. There is no automatic expiry for active subscriptions.

How to leave

Every email I send includes an unsubscribe link. One click removes you — no confirmation step, no re-entry of your address. Gmail and Outlook one-click unsubscribe is also supported.